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AMENDMENTS TO THE CLAIMS 

The following is a complete, marked-up listing of revised claims with a status 
identifier in parenthesis, underlined text indicating insertions, and strike through 
and/or double -bracketed text indicating deletions. 

Listing Of Claims 

1 . (Currently Amended) A method for signing access operations to electronic 
data, comprising: 

performing a security check upon each access operation in order to ascertain 
the identity of a user; 

assigning a user signature, identifying the user, on the basis of the performed 
security check without being viewable by the user; 

assigning at least one role signature, each role signature being assignable to a 
plurality of users, on the basis of the performed security check without being viewable 
by the user, each role signature identifying a different activity group with a particular 
responsibilit y and at least one role affiliation to the activity group ; 

signing each access operation to electronic data by specifying the user 
signature and the at least one role signature; and 

recording each access operation by storing, in an audit memory, accessed data 
information and access operation information together with the user signature and the 
at least one role signature specified for each access operation, 

wherein the user signature is recorded in a user signature memory and in the 
audit memory, 

the accessed data is stored in an application data store, and 
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the at least one role signature is recorded in a role signature memory and in the 

audit memory. 

2. (Original) The method as claimed in claim 1, wherein the security check 
involves biometric data from the user being ascertained. 

3. (Original) The method as claimed in claim 1, wherein the security check 
involves reading at least one of an electronic and mechanical key. 

4. (Previously Presented) The method as claimed in claim 1, wherein the user 
signature to be assigned is ascertainable on the basis of the data ascertained in the 
security check, by checking the user signature memory. 

5. (Previously Presented) The method as claimed in claim 1, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking the role signature memory. 

6. (Original) The method as claimed in claim 4, wherein the user signature 
memory is checked using a data telecommunication link. 

7. (Previously Presented) The method as claimed in claim 1, wherein the at 
least one role signature is a plurality of role signatures. 

8. (Currently Amended) The method as claimed in claim 1, wherein the data 
are medically relevant, wherein 
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the u s ers are activity group is medical specialist personnel, and wherein 

the at least one role signature affiliation is formed in line with the workgroups 

within one of a plurality of workgroups of the medical specialist personnel. 

9. (Currently Amended) A data processing facility, comprising: 

security check means for device to , prior to the data processing facility 

accessing application data, performing perform a security check upon each access 

operation in order to ascertain an identity of a user; [[and)] 

an application data store to store application data; and 

a signature tool, configured to assign a user signature, identifying the user, on 
the basis of an output signal from the security check means device without being 
viewable by the user, 

wherein the signature tool is configured to assign at least one role signature, 
each role signature being assignable to a plurality of users and identifying a different 
activity group with a particular responsibility and at least one role affiliation to the 
activity group , on the basis of an output signal from the security check means device 
without being viewable by the user, 

the signature tool is configured to sign each access operation to electronic data 
by specifying the user signature and the at least one role signature, [[and]] 

the signature tool is configured to record each access operation to access the 
application data by storing, in an audit memory, accessed application data 
information and access operation information together with the user signature and the 
at least one role signature specified for each access operation, and record the user 
signature in a user signature memory and in the audit memory, and record the at 
least one role signature in a role signature memory and in the audit memoryj^and 
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the application data store, the audit memory, the user signature memory and 

the role signature memory are separate according to a modular structure . 

10. (Currently Amended) The data processing facility as claimed in claim 9, 
wherein the security check means device is further for ascertaining to ascertain 
biometric data from the user. 

1 1 . (Currently Amended) The data processing facility as claimed in claim 9, 
wherein the security check means device is configured to read at least one of 
electronic and mechanical keys. 

12. (Currently Amended) The data processing facility as claimed in claim 9, 
wherein the signature tool has access to the user signature memory and is configured 
to check the user signature memory, on the basis of an output signal from the security 
check means device , for the user signature which is to be assigned. 

13. (Currently Amended) The data processing facility as claimed in claim 9, 
wherein the signature tool has access to the role signature memory and is configured 
to check the role signature memory, on the basis of an output signal from the security 
check mean s device , for the at least one role signature which is to be assigned. 

14. (Original) The data processing facility as claimed in claim 12, wherein the 
user signature memory is arranged remotely from the data processing facility, and 
wherein the signature tool has access thereto via a data telecommunication link. 
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15. (Original) The data processing facility as claimed in claim 9, wherein the 
data processing facility is a medical workstation. 

16. (Previously Presented) A storage medium, configured to store information 
and configured to interact with a data processing facility to perform the method as 
claimed in claim 1 . 

17. (Original) The method as claimed in claim 2, wherein the security check 
involves reading at least one of an electronic and mechanical key. 

18. (Previously Presented) The method as claimed in claim 2, wherein the user 
signature to be assigned is ascertainable on the basis of the data ascertained in the 
security check, by checking the user signature memory. 

19. (Previously Presented) The method as claimed in claim 3, wherein the user 
signature to be assigned is ascertainable on the basis of the data ascertained in the 
security check, by checking the user signature memory. 

20. (Previously Presented) The method as claimed in claim 2, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking the role signature memory. 

21. (Previously Presented) The method as claimed in claim 3, wherein the at 
least one role signature to be assigned is ascertainable on the basis of the data 
ascertained in the security check, by checking a role signature memory. 
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22. (Original) The method as claimed in claim 5, wherein the role signature 
memory is checked using a data telecommunication link. 

23-24. (Cancelled) 

25. (Currently Amended) The data processing facility as claimed in claim 11, 
wherein the signature tool has access to the user signature memory and is configured 
to check the user signature memory, on the basis of an output signal from the security 
check means device , for the user signature which is to be assigned. 

26. (Cancelled) 

27. (Currently Amended) The data processing facility as claimed in claim 11, 
wherein the signature tool has access to the role signature memory and is configured 
to check the role signature memory, on the basis of an output signal from the security 
check mean s device , for the at least one role signature which is to be assigned. 

28. (Original) The data processing facility as claimed in claim 13, wherein the 
role signature memory is arranged remotely from the data processing facility, and 
wherein the signature tool has access thereto via a data telecommunication link. 

29. (Currently Amended) A data processing facility, comprising: 
security check means for device to , prior to the data processing facility 

accessing application data, p e rformin g perform a security check upon each access 
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operation in order to ascertain an identity of a user; 

an application data store; and 

signature tool means for device to assigning 

assign a user signature identifying the user, on the basis of an output 

signal from the security check means device without being viewable by the 

user, 

for assigning assign at least one role signature, each role signature 
identifying a different activity group with a particular responsibility and at 
least one role affiliation to the activity group , each role signature being 
assignable to a plurality of users, on the basis of an output signal from the 
security check means device without being viewable by the user, 

for s igning sign access operations to electronic data by specifying the 
user signature and the at least one role signature, and 

for recording record each access operation by storing accessed 
application data information and access operation information together 
with the user signature and the at least one role signature specified for 
each access operation in an audit memory, recording the user signature in 
a user signature memory and in the audit memory, and recording the at 
least one role signature in a role signature memory and in the audit 
memory. 

30. (Currently Amended) The data processing facility as claimed in claim 29, 
wherein the security check means device is further for ascertaining to ascertain 
biometric data from the user. 
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3 1 . (Currently Amended) The data processing facility as claimed in claim 29, 
wherein the security check means device is configured to read at least one of 
electronic and mechanical keys. 

32. (Currently Amended) The data processing facility as claimed in claim 29, 
wherein the signature tool means device includes access to the user signature 
memory and is for checking is configured to check the user signature memory, on the 
basis of an output signal from the security check means device , for the user signature 
which is to be assigned. 

33. (Currently Amended) The data processing facility as claimed in claim 29, 
wherein the signature tool includes access to the role signature memory and is for 
checking is configured to check the role signature memory , on the basis of an output 
signal from the security check mean s device , for the at least one role signature which 
is to be assigned. 

34. (Currently Amended) The data processing facility as claimed in claim 32, 
wherein at least one of the user signature memory and the role signature memory is 
arranged remotely from the data processing facility, and wherein 

the signature tool has access to at least one of the user signature memory and 
the role signature memory via a data telecommunication link. 

35. (Cancelled) 

36. (Original) The data processing facility as claimed in claim 29, wherein the 
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data processing facility is a medical workstation. 
37-39. (Cancelled) 

40. (Previously Presented) A method for reconstruction of access operations to 
electronic data, comprising: 

signing each access operation, wherein 

a security check is performed in order to ascertain the identity of a user, 
a user signature is assigned, identifying the user, on the basis of the 
performed security check, without being viewable by the user, 

at least one role signature is assigned, each role signature being assignable 
to a plurality of users, on the basis of the performed security check, without 
being viewable by the user, each role signature identifying a different activity 
group with a particular responsibility and at least one role affiliation to the 
activity group , 

the access operation is signed by specifying the user signature and the at 
least one role signature, and 

each access operation and the user signature and the at least one role 
signature specified for each access operation are recorded by storing, in an 
audit memory, accessed electronic data information and access operation 
information together with the user signature and the at least one role signature 
specified for each access operation, wherein 

the user signature is recorded in a user signature memory and in the audit 
memory, 

the accessed data is stored in an application data store, and 
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the at least one role signature is stored in a role signature memory and 

in the audit memory; and 

reconstructing each access operation by specifying at least one of the user 
signature and the at least one role signature and accessing the audit memory. 

41. (Currently Amended) The method as claimed in claim 40, wherein an 
access operation can be is reconstructed by specifying at least one of the user's former 
and current role signatures. 

42. (Cancelled) 

43. (Previously Presented) The method as claimed in claim 1, wherein the user 
signature memory and the role signature memory are maintained independently from 
the audit memory. 

44. (Previously Presented) The data processing facility as claimed in claim 9, 
wherein the user signature memory and the role signature memory are maintained 
independently from the audit memory. 

45. (Previously Presented) The data processing facility as claimed in claim 29, 
wherein the user signature memory and the role signature memory are maintained 
independently from the audit memory. 
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46. (Previously Presented) The method as claimed in claim 40, wherein the user 
signature memory and the role signature memory are maintained independently from 
the audit memory. 

47. (New) The method as claimed in claim 1, wherein the at least one role affiliation 
includes one of an administrative team, project manager, practicing physician, medical 
cotechnical assistant, system administrator and personnel department. 

*** END CLAIM LISTING *** 
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